Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a323030313a3a2f34382d3438203d3e203130323132.roa
File:                     323430333a623430303a323030313a3a2f34382d3438203d3e203130323132.roa (raw, json)
Hash identifier:          nNMs4gzZouC2bepJxjlcJbDZL5fihv7Ir9TJIBE9nXk=
Subject key identifier:   44:57:DA:C2:27:D9:CF:BE:80:68:57:C4:70:1D:AD:A8:04:4B:C2:09
Certificate issuer:       /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial:       7C0C90E846376FA1D4CAACB3834EDCB47A711483
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a323030313a3a2f34382d3438203d3e203130323132.roa
Signing time:             Mon 27 Apr 2026 08:37:06 +0000
ROA not before:           Mon 27 Apr 2026 08:32:06 +0000
ROA not after:            Mon 26 Apr 2027 08:37:06 +0000
asID:                     10212
IP address blocks:        2403:b400:2001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 09:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0c:90:e8:46:37:6f:a1:d4:ca:ac:b3:83:4e:dc:b4:7a:71:14:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
        Validity
            Not Before: Apr 27 08:32:06 2026 GMT
            Not After : Apr 26 08:37:06 2027 GMT
        Subject: CN=4457DAC227D9CFBE806857C4701DADA8044BC209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:d2:33:29:8f:0a:9a:50:eb:7f:3a:6a:0a:
                    7f:9d:40:c9:61:0d:eb:40:f6:15:0a:9f:3e:e6:e6:
                    26:de:ae:52:27:b8:e2:9e:96:c0:6d:5d:5b:13:82:
                    c2:3a:7f:71:f5:40:33:5a:45:d2:50:d2:f3:d9:d7:
                    5f:4b:1e:3c:a0:64:83:bb:c0:cf:51:10:dc:41:73:
                    7f:2a:91:57:7e:20:75:af:45:84:68:f8:ee:5d:2d:
                    6e:52:87:04:14:e3:2f:84:51:f9:f4:5f:d7:88:90:
                    04:fd:bb:b1:0f:ec:16:ed:e7:fa:58:55:9c:62:c2:
                    a8:9e:43:3d:09:e7:5d:5c:84:03:86:51:46:ee:fc:
                    34:84:59:a6:1d:93:b8:c4:fe:65:fe:72:e2:ab:78:
                    36:a1:5e:b9:d4:66:02:67:84:ff:96:58:d3:98:23:
                    0c:f5:c8:87:79:2a:dd:37:8c:11:65:d0:93:03:c4:
                    61:c0:d6:22:e0:04:8d:9b:30:6f:63:41:75:7b:b1:
                    06:db:64:f2:75:ff:65:04:d1:f7:98:f9:a1:44:4f:
                    06:44:f9:47:16:0b:95:ac:75:67:d6:ad:7e:90:96:
                    5f:e2:6f:10:1d:8f:ab:1b:60:65:dc:e2:e8:10:a1:
                    b6:4a:4a:28:45:83:20:1e:ff:41:4b:84:6b:a3:5b:
                    0b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:57:DA:C2:27:D9:CF:BE:80:68:57:C4:70:1D:AD:A8:04:4B:C2:09
            X509v3 Authority Key Identifier:
                keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a323030313a3a2f34382d3438203d3e203130323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:b400:2001::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:40:12:3d:a0:5d:08:c9:dd:c3:41:a0:54:20:88:f8:79:d8:
         5b:0d:2f:80:7a:e4:aa:2b:4c:46:e8:2d:36:d0:4d:fc:cc:02:
         84:c1:a0:80:c1:fb:07:ba:57:f2:e4:03:cf:88:5d:61:f3:2e:
         40:fb:dd:d6:52:1d:89:bc:7c:e0:24:38:4f:c9:a9:8f:28:a7:
         d8:b7:bf:e8:ea:6a:ce:1e:ac:b2:34:df:6c:8f:b7:87:4f:e6:
         7c:bc:90:3e:b6:c5:31:5a:28:89:f4:1f:cb:c4:83:28:7e:20:
         68:cf:b0:34:c4:cd:34:20:eb:91:59:8d:82:1e:8d:e7:57:64:
         3f:0d:52:7c:a6:63:a5:c8:fe:6b:3f:03:9c:70:28:2e:3f:b7:
         86:06:90:f4:f1:e9:8c:14:5f:33:4b:1d:74:5f:07:00:1d:5a:
         ae:2f:6c:1c:2a:f3:bf:99:b6:c4:ea:e4:be:dd:18:d0:70:2b:
         c2:c0:07:b6:22:4b:c9:49:15:b9:0a:f8:56:bc:0a:b9:02:15:
         7d:b7:43:84:48:f8:21:20:d2:39:1f:58:9f:5b:1f:73:e2:60:
         dc:e9:6d:e5:24:b2:ae:7d:6c:e8:a9:4a:01:8e:49:fc:6f:93:
         df:cb:cf:57:f4:16:7a:9f:6d:ec:7d:c6:55:40:35:a5:93:ca:
         ca:15:d8:2e
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUfAyQ6EY3b6HUyqyzg07ctHpxFIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx
NkYzQTdFRjAeFw0yNjA0MjcwODMyMDZaFw0yNzA0MjYwODM3MDZaMDMxMTAvBgNV
BAMTKDQ0NTdEQUMyMjdEOUNGQkU4MDY4NTdDNDcwMURBREE4MDQ0QkMyMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+sNIzKY8KmlDrfzpqCn+dQMlh
DetA9hUKnz7m5iberlInuOKelsBtXVsTgsI6f3H1QDNaRdJQ0vPZ119LHjygZIO7
wM9RENxBc38qkVd+IHWvRYRo+O5dLW5ShwQU4y+EUfn0X9eIkAT9u7EP7Bbt5/pY
VZxiwqieQz0J511chAOGUUbu/DSEWaYdk7jE/mX+cuKreDahXrnUZgJnhP+WWNOY
Iwz1yId5Kt03jBFl0JMDxGHA1iLgBI2bMG9jQXV7sQbbZPJ1/2UE0feY+aFETwZE
+UcWC5WsdWfWrX6Qll/ibxAdj6sbYGXc4ugQobZKSihFgyAe/0FLhGujWwsHAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQURFfawifZz76AaFfEcB2tqARLwgkwHwYDVR0j
BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5
QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw
gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4LzAvMzIzNDMwMzMz
YTYyMzQzMDMwM2EzMjMwMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzAz
MjMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwAkA7QAIAEwDQYJKoZIhvcNAQELBQADggEBAAxAEj2g
XQjJ3cNBoFQgiPh52FsNL4B65KorTEboLTbQTfzMAoTBoIDB+we6V/LkA8+IXWHz
LkD73dZSHYm8fOAkOE/JqY8op9i3v+jqas4erLI032yPt4dP5ny8kD62xTFaKIn0
H8vEgyh+IGjPsDTEzTQg65FZjYIejedXZD8NUnymY6XI/ms/A5xwKC4/t4YGkPTx
6YwUXzNLHXRfBwAdWq4vbBwq87+ZtsTq5L7dGNBwK8LAB7YiS8lJFbkK+Fa8CrkC
FX23Q4RI+CEg0jkfWJ9bH3PiYNzpbeUksq59bOipSgGOSfxvk9/Lz1f0Fnqfbex9
xlVANaWTysoV2C4=
-----END CERTIFICATE-----
Generated at Mon Apr 27 13:23:09 2026 by rpki-client